Kubernetes version history

Changes in Kubernetes aaS service:

• Removal of storage.k8s.io/v1beta1 from CSIStorageCapacity.
• Stopped support for deprecated seccomp annotations.
• Removal of several feature gates for volume expansion.

Read more about these and other changes in official Kubernetes documentation.

Important changes in Kubernetes:

• SeccompDefault moved to the stable status.
• Mutable scheduling directives for Jobs transferred to the status of general availability.
• DownwardAPIHugePages moved to the stable status.
• Added the ability to access cluster node logs via the Kubernetes API.

Vulnerability fixes:

• CVE-2023-2728: bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin.

Read more about these and other changes in official Kubernetes documentation.

Changes in Kubernetes aaS service:

• Calico updated to version 3.26.1.
• Helm updated to version 3.12.2.
• Gatekeeper updated to version 3.12.0.

Important changes in Kubernetes:

• Outdated APIs in beta status removed and not supported.
• The GlusterFS driver is completely removed in release 1.26. If you still have disks with such a driver, perform the migration.
• The CLI flag pod-eviction-timeout has been moved to the deprecated status and will be removed in v1.27.
• The CLI flag --master-service-namespace in Kube-apiserver has been moved to deprecated status and will be removed in v1.27.

Vulnerability fixes:

• CVE-2023-27561, CVE-2023-25809, CVE-2023-28642: changing the runc version from v1.1.4 to v1.1.5, fixed the error of deleting cgroup when using runc version higher than 1.1.6.

Read more about these and other changes in official Kubernetes documentation.

Important changes in Kubernetes:

• PodSecurityPolicy has been removed. After the withdrawal from support in Kubernetes version 1.21, users had the opportunity to switch to Pod Security Admission. If you are using PodSecurityPolicy, then follow the migration instructions.
• The GlusterFS and Portworx disk plugins have been removed from support. Flocker, Quobyte, and StorageOS removed from Kubernetes.
• vSphere support below 7.0u2 is discontinued.
• Starting from version 1.25 Kubelet will not create iptables chains in NAT tables: KUBE-MARK-DROP, KUBE-MARK-MASQ, KUBE-POSTROUTING.

Read more about these and other changes in official Kubernetes documentation.

Changes in Kubernetes aaS service: Calico updated to version 3.25.0.

Important changes in Kubernetes:

• Dockershim deleted from kubelet.
• Beta APIs are off by default.
• Kubernetes 1.24 offers beta support for publishing its APIs in the OpenAPI v3 format.
• Secrets for service accounts are not created by default.

Vulnerability fixes:

• CVE-2022-3294: node address isn't always verified when proxying.
• CVE-2022-3162: unauthorized read of custom resources.

Read more about these and other changes in official Kubernetes documentation.

Important changes in Kubernetes: Kubernetes is now built on Golang 1.17.13.

Vulnerability fixes:

• CVE-2022-3172: the aggregated kube-apiserver API server can cause client redirects.
• CVE-2021-25749: the runAsNonRoot logic is skipped for Windows containers.

Read more about these and other changes in official Kubernetes documentation.

Changes in Kubernetes aaS service: Added integration with VK Cloud IAM.

Important changes in Kubernetes:

• The FlexVolume functionality has been moved to deprecated status.
• Functionality specific flags for klog has been moved to deprecated status.
• The IPv4/IPv6 dual-stack networking functionality has been moved to general availability status.
• HorizontalPodAutoscaler v2 functionality has been moved to general availability status.
• Generic Ephemeral Volume functionality has been moved to general availability status.
• Skip Volume Ownership change functionality has been moved to general availability status.
• The functionality allowing CSI drivers to opt-in to volume ownership and permission changes has been moved to general availability status.
• The PodSecurity functionality has been moved to beta status.
• Kubelet now supports CRI v1 API.
• Logging structuring functionality has been moved to beta status.
• ServerSideFieldValidation function returns warning if Kubernetes object in request contains unknown or duplicated fields.
• Expression language checking for CRD has been moved to alpha status.
• The OpenAPI v3 functionality has been moved to alpha status.

Read more about these and other changes in official Kubernetes documentation.

Changes in Kubernetes aaS service:

• The AlmaLinux operating system version 9 is used on the cluster nodes.
• By default, a limit on computational resources consumed (limit ranges) is set for namespaces.

Important changes in Kubernetes:

• The PodSecurityPolicy component is replaced by alpha version of PodSecurity.
• The Memory Manager component has been moved to beta status.
• New API Server Tracing functionality added, now in alpha status.
• New Generic data populators functionality added for Persistent Volumes, currently alpha.
• A new version of the configuration format for kubeadm has been added: v1beta3.
• Kubernetes control plane now always uses CronJobs controller version 2.
• All Kubernetes control plane components on nodes (including kubelet, kube-proxy and container runtime) can now be run as non-root users. This functionality is in alpha stage.

Read more about these and other changes in official Kubernetes documentation.

Changes in Kubernetes aaS service: The AlmaLinux version 8 operating system is used on the cluster nodes.

Important changes in Kubernetes:

• Functionality of CronJob moved to stable status.
• Added support for immutable Secret and ConfigMap.
• Added support for IPv4/IPv6 Dual-Stack.
• Added support for Graceful Node Shutdown.
• Added support for PersistentVolume Health Monitor.
• Simplified support for the Kubernetes build system.
• PodSecurityPolicy functionality moved to deprecated status.
• The topologyKeys parameter for Service has been moved to deprecated status.

Read more about these and other changes in official Kubernetes documentation.

Changes in Kubernetes aaS service:

• The runtime environment of the cluster has been replaced by CRI-O.
• Changed log storage format.

Important changes in Kubernetes:

• The Dockershim runtime component has been moved to deprecated status.
• The Volume Snapshot Operations functionality has been moved to stable status.
• The API Priority and Fairness (APF) functionality is now enabled by default.
• The kubectl alpha debug command has been moved to beta status and becomes kubectl debug.